June 22, 2022

DATA SHEET

FireEye Endpoint Security Agent Software

The most recent Endpoint Security Agent software is version 34.28.6 for use with Server version 5.2 or greater. Tables 1,2,3,4 list supported agents for
Windows, macOS, and Linux operating systems. Unless otherwise shown, all editions of these operating systems are supported. See page 8 for support
exceptions. Tables 5,6, and 7 list no longer supported for Windows, macOS and Linux operating systems. Tables 8, 9, and 10 provide specifications
for each operating system using the Endpoint Security Agent.

Table 1. Endpoint Agent supported features.

AGENT: V34
Windows Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
Windows 7 ✓ ✓ ✓ ✓ ✓ ✓
Windows 8, 8.1 ✓ ✓ ✓ ✓ ✓ ✓
Windows 10 ✓ ✓ ✓ ✓ ✓ ✓
Windows 11 ✓ ✓ ✓ ✓ ✓ ✓
Server 2008R2 ✓ ✓ ✓ ✓ ✓ ✓
Server 2012 & 2012R2 ✓ ✓ ✓ ✓ ✓ ✓
Server 2016 ✓ ✓ ✓ ✓ ✓ ✓
Server 2019 ✓ ✓ ✓ ✓ ✓ ✓
Server 2022 ✓ ✓ ✓ ✓ ✓ ✓
macOS Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
macOS 11.0 – 11.6 ✓ ✓ X ✓ X ✓
macOS 12.0 – 12.3 ✓ ✓ X ✓ X ✓
Linux Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
RHEL 6.10, 7.2-7.9, 8.0-8.6 ✓ ✓ X ✓ X ✓
CentOS 6.10, 7.2-7.9, 8.0 - 8.5 ✓ ✓ X ✓ X ✓
Rocky Linux 8.4 – 8.5 ✓ ✓ X ✓ X ✓
Ubuntu 14.04, 16.04, 18.0.4, 19.04, 20.04, 22.04 ✓ ✓ X ✓ X ✓
SUSE Enterprise Linux Server ✓
✓ ✓ X X ✓
12 SP4-SP5, 15 GA, SP1 - SP3
OpenSUSE Leap 15.1, 15.2, 15.3 ✓ ✓ X ✓ X ✓
Amazon AMI 2018.3, Amazon Linux 2 ✓ ✓ X ✓ X ✓
Oracle Linux 6.10, 7.7 -7.9, 8.0 - 8.5 ✓ ✓ X ✓ X ✓
✓ Available in current version, X Not Available
 June 22, 2022
Table 2. Endpoint Agent Supported Versions on Microsoft Windows
AGENT VERSION 34.28.6 34.28 33.46 32.30 30.19
MINIMUM ENDPOINT SECURITY 5.2
5.2 5.1 5.0 4.8
VERSION
XP SP2 (32-bit) X X X X X
XP SP31 (32-bit) X X X X ✓E*
Vista SP1, SP2
X X X X ✓E*
(32-bit and 64-bit)
Win 7, SP1
(32-bit and 64-bit)
✓ ✓ ✓ ✓ ✓
Win 8
(32 -bit and 64-bit)
✓ ✓ ✓ ✓ ✓
Win 8.1, Update 1
(32 -bit and 64-bit)
✓ ✓ ✓ ✓ ✓
Win 10 1511,
(32 -bit and 64-bit)
X X X ✓ ✓
Win 10, 1607, 1703, 1709, LTSB
(32 -bit and 64-bit)
✓ ✓ ✓ ✓ ✓
Win 10 1803, 1809, 1903,
(32-bit and 64-bit)
✓ ✓ ✓ ✓ ✓
Win 10 19H2
Windows Versions

(32-bit and 64-bit)

✓ ✓ ✓ ✓ ✓
Win 10 20H1
(32-bit and 64-bit)
✓ ✓ ✓ ✓ ✓
Win 10 20H2
(32-bit and 64-bit)
✓ ✓ ✓ X X

Win 10 21H1
(32-bit and 64-bit)
✓ ✓ P1 X X

Win 10 21H2
(32-bit and 64-bit)
✓ P1 P1 X X

Win 11 (21H2)
(64-bit)
✓ P1 P1 X X

Server 2003 SP2, R2 SP2

X X X X ✓E*
(32-bit and 64-bit)
Server 2008 Standard,
X X X X ✓E*
(32 bit and 64-bit)
Server 2008 R2,
(32 bit and 64-bit)
✓ ✓ ✓ ✓ ✓E*
Server 2012 (32-bit and 64-bit)
Server 2012 R2 (64-bit) ✓ ✓ ✓ ✓ ✓
Server 2016 (64-bit) ✓ ✓ ✓ ✓ ✓
Server 2019 (64-bit) ✓ ✓ ✓ ✓ ✓
Server 2022 (64-bit) P2 P1 ✓ X X
1 Windows Embedded POSReady 2009 is based on Windows XP SP3
P1: Memory-related audits, CIMFS, Bypass IO in Driver & Azure File Sync are not supported.
P2: CIMFS, Bypass IO in Driver & Azure File Sync are not supported.
E*. Once standard support expires, extended support can be purchased for this agent version and OS version.
Windows Core is supported at the same level as the equivalent Windows 10 version
 June 22, 2022

Table 3. Endpoint Agent Supported Versions on Apple macOS

AGENT VERSION 34.28.6 34.28.1 34.28.0 33.51 33.46 32.30 30.19
MINIMUM ENDPOINT SECURITY VERSION 5.2 5.2 5.2 5.1 5.1 5.0 4.8
10.9 Mavericks (64-bit) X X X X X ✓ ✓
10.10 Yosemite (64-bit) X X X X X ✓ ✓
10.11 El Capitan (64-bit) X X X X X ✓ ✓
macOS Versions

10.12 Sierra (64-bit) X X X X X ✓ ✓

10.13 High Sierra (64-bit) X X X X X ✓ ✓
10.14 Mojave (64-bit) X X X X X ✓ ✓
10.15 Catalina (64-bit) X X X X X ✓ ✓
11 Big Sur:11.0 -- 11.4 (64-bit) P3 P3 P3 P2 P1 X X
11 Big Sur 11.5 -11.6 (64-bit) P3 P3 P3 X X X X
12 Monterey 12.0 – 12.1 (64-bit) P3 P3 P3 P2 X X X
12 Monterey 12.2 (64-bit) P3 P3 X X X X X
12 Monterey 12.0 – 12.1 (64-bit) P3 X X X X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Exceptions” on page 8.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, macOS, or Linux operating system version listed.
P1: Does not support network containment & Real Time detection engine. Persistence, Syslog and Sysinfo audits may return incomplete data
P2: Persistence, Syslog and Sysinfo audits may return incomplete data
P3: Syslog and Sysinfo audits may return incomplete data
 June 22, 2022

Table 4. Endpoint Agent Supported Versions on Linux.

AGENT VERSION 34.28.6 34.28 33.51 33.46 32.30 30.19
MINIMUM ENDPOINT SECURITY VERSION 5.2 5.2 5.1 5.1 5.0 4.8
RHEL 6.8, 6.9, (64-bit) X X X ✓ ✓ ✓
RHEL 6.10 (64-bit) ✓ ✓ X ✓ ✓ ✓
RHEL 7.2, 7.3, 7.4, 7.5, 7.6, 7.7 (64-bit) ✓ ✓ X ✓ ✓ ✓
RHEL 7.8, 7.9 (64-bit) ✓ ✓ X ✓ X X
RHEL 8.0 (64-bit) ✓ ✓ X ✓ ✓ ✓
RHEL 8.1, 8.2, 8.3 (64-bit) ✓ ✓ X ✓ ✓ X
RHEL 8.4, 8.5 (64-bit) ✓ ✓ X X X X
RHEL 8.6 (64-bit) ✓ X X X X X
CENTOS 6.8, 6.9 (64-bit) X X X ✓ ✓ ✓
CENTOS 6.10 (64-bit) ✓ ✓ X ✓ ✓ ✓
CENTOS 7.2, 7.3, 7.4, 7.5, 7.6, 7.7 (64-bit) ✓ ✓ X ✓ ✓ ✓
CENTOS 7.8, 7.9 (64-bit) ✓ ✓ X X X X
CENTOS 8.0 (64-bit) ✓ ✓ X ✓ ✓ X
CENTOS 8.4 (64-bit) ✓ ✓ X X X X
CENTOS 8.1 – 8.5 (64-bit) ✓ X X X X X
Linux Distributions

Rocky Linux 8.4 – 8.5 (64-bit) ✓ X X X X X

SUSE Enterprise Linux Server 11 SP3-SP4, 12 SP2-SP3 (64-bit) X X X ✓ ✓ ✓
SUSE Enterprise Linux Server 12 SP4-SP5 (64-bit) ✓ ✓ X ✓ X X
SUSE Enterprise Linux Server 15 GA, SP1-PS3 (64-bit) ✓ ✓ X ✓ ✓ ✓
OpenSUSE Leap 15.1 (64-bit) ✓ ✓ X ✓ ✓ X
OpenSUSE Leap 15.2 (64-bit) ✓ ✓ X ✓ X X
OpenSUSE Leap 15.3 (64-bit) ✓ ✓ X X X X
Ubuntu 12.04 (64-bit) X X X ✓ ✓ ✓
Ubuntu 14.04, 16.04, 18.04, 18.04.3 (64-bit) ✓ ✓ X ✓ ✓ ✓
Ubuntu 19.04 (64-bit) ✓ ✓ X ✓ ✓ X
Ubuntu 20.04 LTS (64-bit) ✓ ✓ X ✓ X X
Ubuntu 22.04 LTS (64-bit) ✓ X X X X X
Amazon Linux AMI 2018.3 (64-bit) ✓ ✓ X ✓ ✓ ✓
Amazon Linux 2 (64-bit) ✓ ✓ X ✓ X X
Oracle 6.10 (UEK & RHCK) (64-bit) ✓ ✓ X ✓ ✓ ✓
Oracle 7.6 (UEK & RHCK) (64-bit) X X X ✓ ✓ ✓
Oracle 7.7 – 7.8 (UEK) (64-bit) ✓ X X X X X
Oracle 7.9 (UEK) (64-bit) ✓ ✓ X ✓ X X
Oracle 8.0, (UEK & RHCK) (64-bit) ✓ ✓ X ✓ X X
Oracle 8.1, 8.2 (UEK & RHCK) (64-bit) ✓ ✓ X ✓ X X
Oracle 8.3, 8.4 (UEK) (64-bit) ✓ ✓ X X X X
Oracle 8.5 (UEK) (64-bit) ✓ X X X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Exceptions” on page 8.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, macOS, or Linux operating system version listed.
 June 22, 2022

The Endpoint Security Agent versions below are no longer supported are listed for reference only.

Table 5. No Longer Supported Version of Endpoint Security Agent Software on Microsoft Windows.
AGENT VERSION 31.28 29.7 28.8 27.3 26.21 25.12.x*1 25.12.0 24.9.x*2 23.10.1* 23.10.0 22.41
MINIMUM ENDPOINT SECURITY VERSION 4.9 4.7 4.6 4.5 4.0.2 3.6 3.6 3.5 3.3 3.3 3.2**
Last Supported Date 31 Oct 24 Jul 8 May 27 Jan 28 Mar
2021 2020 2020 2020 2019
XP SP2 (32-bit) X X X X X X X X X X X
XP SP33 (32-bit) X ✓ ✓ ✓ ✓ P2 P2 P2 P2 P2 P2
Vista SP1, SP2 X
(32-bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 7, SP1
(32-bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 8
(32 -bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 8.1, Update 1
(32 -bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 10 1703, 1609, LTSB
Windows Versions

(32 -bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓

Win 10 1803
(32-bit and 64-bit) ✓ ✓ ✓ ✓ X X X X X X X
Win 10 1903
(32-bit and 64-bit) ✓ ✓ ✓ X X X X X X X X
Win 10 1909
(32-bit and 64-bit) ✓ ✓ X X X X X X X X X
Win 10 20H1
(32-bit and 64-bit) P1 X X X X X X X X X X
Win 10 20H2
(32-bit and 64-bit) X X X X X X X X X X X
Server 2003 SP2, R2 SP2
(32-bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2008 R1, (64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2008, R2, R2 SP1 (64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2012 (32-bit and 64-bit)
Server 2012 R2 (64-bit)
✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2016 (64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ P3 X X X
Server 2019 (64-bit) ✓ ✓ ✓ X X X X X X X X
Server 2022 (64-bit) X X X X X X X X X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Notes” on page 8.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, MacOS X, or Linux operating system version listed.
P1: Does not record registry events in lookback cache.
P2: URL monitoring events are not supported.
P3: Memory-related audits are not supported.
1 Endpoint Security Agent software versions 25.12.1 and 25.12.2
2 Endpoint Security Agent software versions 24.9.0, 24.9.3, and 24.9.4
3 Windows Embedded POSReady 2009 is based on Windows XP SP3
*Endpoint Security Agent software versions 25.12.2, 25.12.1, 24.9.x, and 23.10.1 support Windows endpoints only.
**Endpoint Security 3.2 and later do not provide FireEye Intel to FireEye Endpoint Security Agents earlier than version 11.
 June 22, 2022

Table 6. No Longer Supported Version of Endpoint Security Agent Software on Apple macOS
AGENT VERSION 31.28 29.7 28.8 27.30 26.21
MINIMUM ENDPOINT SECURITY VERSION 4.9 4.7 4.6 4.5 4.0.2
Last Supported Date 31 Oct 2021 24 Jul 2020 8 May 2020 27 Jan 2020 28 Mar 2019
10.9 Mavericks (64-bit) ✓ ✓ ✓ ✓ ✓
macOS Versions

10.10 Yosemite (64-bit) ✓ ✓ ✓ ✓ ✓

10.11 El Capitan (64-bit) ✓ ✓ ✓ ✓ ✓
10.12 Sierra (64-bit) ✓ ✓ ✓ ✓ ✓
10.13 High Sierra (64-bit) ✓ ✓ ✓ ✓ ✓
10.14 Mojave (64-bit) ✓ ✓ ✓ ✓ X
10.15 Catalina (64-bit) ✓ X X X X
11 Big Sur (64-bit) X X X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Notes” on page 8.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, MacOS X, or Linux operating system version listed.
 June 22, 2022

Table 7. No Longer Supported Version of Endpoint Security Agent Software on Linux.

AGENT VERSION 31.28 29.7 28.8 27.30 26.21
MINIMUM ENDPOINT SECURITY VERSION 4.9 4.7 4.6 4.5 4.0.2
Last Supported Date 31 Oct 2021 24 Jul 2020 8 May 2020 27 Jan 2020 28 Mar 2019
RHEL 6.8 (64-bit) ✓ ✓ X ✓ ✓
RHEL 6.9, 6.10 (64-bit) ✓ ✓ X ✓ X
RHEL 7.2, 7.3 (64-bit) ✓ ✓ X ✓ ✓
RHEL 7.4, 7.5, 7.6 (64-bit) ✓ ✓ X ✓ X
RHEL 7.7 (64-bit) ✓ X X X X
RHEL 7.8, 7.9 (64-bit) X X X X X
RHEL 8.0 (64-bit) ✓ ✓ X X X
RHEL 8.1, 8.2, 8.3 (64-bit) X X X X X
CENTOS 6.8, 6.9, 6.10 (64-bit) ✓ ✓ X ✓ X
CENTOS 7.2, 7.3, 7.4, 7.5, 7.6 (64-bit) ✓ ✓ X ✓ X
Linux Distributions

CENTOS 7.7 (64-bit) ✓ X X X X

CENTOS 8.0 (64-bit) ✓ X X X X
SUSE Enterprise Linux Server 11 SP3-SP4, 12 ✓
SP2-SP3 (64-bit)
✓ X X X
SUSE Enterprise Linux Server 12 SP4-SP5 (64- X X X X X
bit)
SUSE Enterprise Linux Server 15 GA (64-bit) ✓ ✓ X X X
OpenSUSE Leap 15.1 (64-bit) ✓ X X X X
OpenSUSE Leap 15.2 (64-bit) X X X X X
Ubuntu 12.04, 14.04, 16.04, 18.04, 18.04.3 ✓
(64-bit)
✓ X X X
Ubuntu 19.04 (64-bit) ✓ X X X X
Ubuntu 20.04 (64-bit) X X X X X
Amazon Linux AMI 2018.3 (64-bit) ✓ ✓ X X X
Amazon Linux 2 (64-bit) X X X X X
Oracle Linux 6.10 (UEK and RHCK) (64-bit) ✓ ✓ X X X
Oracle Linux 7.6 (UEK and RHCK) (64-bit) ✓ ✓ X X X
Oracle Linux 7.9 (UEK) (64-bit) X X X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Notes” on page 8.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, MacOS X, or Linux operating system version listed.
 June 22, 2022

FireEye Endpoint Security Agent Feature Support Notes

• Some Endpoint Security features require specific versions of FireEye Endpoint Security Agent software. See the FireEye Endpoint Security Server User
Guide and the FireEye Endpoint Security Agent Administration Guide for more details.
• Windows Embedded Enterprise and IoT Enterprise versions are supported with the equivalent version of Windows desktop version
• Memory-related audits are not supported for host endpoints running 32-bit Win10 hosts.
• Memory-related audits are not supported on Win 10 21H2 and Win 11 (21H2) before 34.28.1
• Agent 33.46 does not support network containment, Real-Time detection engine, and Imageload events for the Real-Time detection engine on
macOS 11.
• Agent 33.51 is only supported on macOS 11 (before 11.5) and macOS12.

Endpoint Security System Requirements

FireEye Endpoint Security Agent recommended usage is on a 4th generation (Haswell) Intel or comparable processor. The agent can be installed on
any built-in hard drive with minimum available storage of 1 GB. For best performance a solid-state storage system is preferred for disk I/O intensive
operations such as exhaustive enterprise searches. The agent will run on the following operating systems:

Table 8. Requirements for Windows operating systems. Table 9. Requirements for macOS.
MAC OS VERSIONS MINIMUM SYSTEM MEMORY (RAM)
WINDOWS OPERATING SYSTEM MINIMUM SYSTEM MEMORY (RAM)
VERSIONS Mavericks 10.9 (64-bit) 2 GB
XP SP3 (32-bit) 1 GB (Agent version 30 is final Yosemite 10.10 (64-bit)
Server 2003 R2 SP2 (32-bit, 64-bit) supported) El Capitan 10.11 (64-bit)
Sierra 10.12 (64-bit)
Vista SP1 and higher (32-bit, 64-bit) 2 GB High Sierra 10.13 (64-bit)
Windows 7and Win 7 SP1 (32-bit, 64-bit) Mojave 10.14 (64-bit)
Win 8 (32-bit, 64-bit) Catalina 10.15 (64-bit)
Win 8.1 (32-bit, 64-bit) Big Sur 11.0 – 11.6 (64-bit) 2 GB
Win 10 (32-bit, 64-bit)
Monterey 12.0 (64-bit) 2 GB
Win 11 (64-bit)
Server 2008 (32-bit, 64-bit) 2 GB
Server 2008 R1, R2, R2 SP1, R2 SP2 (32-bit, 64-bit)
Server 2012 (32-bit, 64-bit)
Server 2012 R2 (64-bit)
Server 2016 (64-bit) Table 10. Requirements for Linux operating systems.
Server 2019 (64-bit) LINUX OPERATING SYSTEM VERSIONS MINIMUM SYSTEM MEMORY (RAM)
Server 2022 (64-bit)
RHEL 6.8-6.10, 7.2-7.9, 8.0-8.5 2 GB
CentOS 6.8-6.10, 7.2-7.9, 8.0, 8.4
SUSE Enterprise Linux 11 SP3, SP4
SUSE Enterprise Linux 12 SP2-SP5, 15 GA, SP1-SP3
OpenSUSE Leap 15.1, 15.2, 15.3
Ubuntu 12.04, 14.04, 16.04, 18.0.4, 19.04, 20.04 LTS
Amazon AMI 2018.3, Amazon Linux 2
Oracle Linux 6.10, 7.6, 7.9, 8.0-8.2
 June 22, 2022

To learn more about FireEye, visit: www.FireEye.com

FireEye, Inc. About FireEye, Inc.

408.321.6300/877.FIREEYE (347.3393) FireEye is the intelligence-led security company. Working as a
[email protected] seamless, scalable extension of customer security operations, FireEye
offers a single platform that blends innovative security technologies to
eliminate the complexity and burden of cyber security for
© 2021 FireEye, Inc. All rights reserved. FireEye is a registered trademark
organizations struggling to prepare for, prevent and respond to cyber-
of FireEye, Inc. All other brands, products, or service names are or may be attacks.
trademarks or service marks of their respective owners.